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Top Stories 

• The New York State Public Service Commission announced November 19 that Con Ed 
violated 11 gas- safety regulations following a 2014 building explosion that killed 8 people, 
injured 50 others, and displaced over 100 families. - New York Daily News (See item 2) 

• Officials announced November 18 that Home Depot continued to sell 28 types of products 
that had fire, bum, shock, fall, laceration, and other hazards after they were recalled from 
2012-2015 . - U.S. Consumer Product Safety Commission (See item 5) 

• Schaumburg, Illinois-based Nation Pizza issued November 19 a nationwide recall of 
59,028 pounds of frozen Mama Cozzi’s Pizza Kitchen products due to undeclared soy 
allergens. - U.S. Department of Agriculture (See item 15) 

• Officials reported November 19 that 71 additional cases of Salmonella Poona infection, 
connected to imported cucumbers from Mexico were reported in 23 States following an 
October 14 outbreak. - U.S. Centers for Disease Control and Prevention (See item 16) 
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Energy Sector 



1. November 20, U.S. Environmental Protection Agency - (Kansas; New Mexico; Utah) 
U.S. settles with gasoline refiner to reduce emissions at Utah facility. The U.S. 
Department of Justice and the U.S. Environmental Protection Agency announced 
November 19 that it reached a settlement with HollyFrontier Corporation subsidiaries, 
Navajo Refining Company, LLC, Holly Refining & Marketing Company-Woods 
Cross, LLC, Frontier El Dorado Refining, LLC, and HollyFrontier Refining & 
Marketing LLC resolving alleged Clean Air Act violations regarding fuel quality 
emissions standards and testing requirements at three facilities in Kansas, Utah, and 
New Mexico. The settlement also includes the implementation of a mitigation project at 
the company’s Salt Lake City facility, and a $1.2 million civil penalty paid to the U.S. 
Source: 

http://vosemite.epa.gOv/opa/admpress.nsf/Q/94FADCE9A95F777885257F02006BQF47 

2. November 19, New York Daily News - (New York) Con Ed accused of 11 gas-safety 
violations in 2014 East Harlem blast after state probe. The New York State Public 
Service Commission announced November 19 that Con Ed violated 1 1 gas-safety 
regulations following its investigation into a 2014 East Harlem building explosion that 
killed 8 people, injured 50 others, and displaced over 100 families. The commission 
determined that Con Ed failed to properly install a gas pipe leading to the building and 
failed to call for emergency backup after the utility received 2 reports of gas odors, 
among other violations. 

Source: http://www.nvdailynews.com/new-vork/manhattan/ed-accused-ll-violations- 
east-harlem- gas -blast- article- 1 . 2440460 

3. November 19, Associated Press - (International) Manslaughter charges filed in 
deadly 2012 Gulf of Mexico platform blast. Black Elk Energy Offshore Operations 
LLC and contractors, Grand Isle Shipyards Inc., and Wood Group PSN Inc., were 
indicted by a Federal grand jury November 19 on involuntary manslaughter charges, 
and charged with violating the Clean Water Act and the Outer Continental Shelf Lands 
Act following a 2012 explosion on an oil production platform in the Gulf of Mexico 
that killed 3 workers and injured several others. 

Source: http://abcl3.com/news/manslaughter-charges-filed-in-deadly-201 2-platform- 
blast/ 109 1708/ 

Chemical Industry Sector 

Nothing to report 

Nuclear Reactors, Materials, and Waste Sector 

4. November 20, Allentown Morning Call - (Pennsylvania) Talen Energy’s 
Susquehanna Unit 1 reactor is repaired, back in service. Talen Energy Corp. 
officials reported November 20 that its Susquehanna Nuclear plant’s Unit 1 reactor was 
back online following a November 12 shutdown that was caused by an electrical coil 
issue that triggered 1 of the 8 large steam valves to close unexpectedly during testing, 
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as well as a leak found in the lower seal cavity vent piping for the reactor recirculation 
pump. 

Source: http://www.mcall.com/business/rnc-talen-susquehanna-nuclear-plant-unit-l- 
shutdown-restored-2015 1 120-story.html 



Critical Manufacturing Sector 

5. November 18, U.S. Consumer Product Safety Commission - (National) Recalled 
products sold by Home Depot after recalls were announced. The U.S. Consumer 
Product Safety Commission announced November 18 that Home Depot continued to 
sell 28 types of products that had fire, bum, shock, fall, laceration, and other hazards 
after they were recalled from 2012-2015. Approximately 1,300 units were sold to 
customers in Home Depot stores and 1,010 were sold by recyclers or salvagers. 

Source: http://www.cpsc.gov/en/Recalls/2016/Recalled-Products-Sold-by-Home- 
Depot-After-Recalls-Were- Announced/ 

Defense Industrial Base Sector 

Nothing to report 

Financial Services Sector 

6. November 20, New London Day - (Connecticut) Connecticut man faces federal 
charges for alleged housing scams. An Easton man was charged November 19 in 
Federal court for a $5 million fraud scheme, in which he targeted foreclosure victims 
by promising homeowners debt relief, but used their homes for profit and pocketed the 
money for personal expenses instead of applying the funds to homeowners’ mortgages, 
taxes, and other property-related expenses. 

Source: http://www.theday.com/local/20151 1 19/connecticut-man-faces-federal- 
charges-for-alleged-housing-scams 

7. November 20, Securityweek - (International) New Dyre variant can target Windows 
10 and Microsoft Edge users. Security researchers from Heimdal discovered a new 
version of Dyre/Dyreza banking malware that can compromise a variety of Windows 
systems, connect into various browsers including Google Chrome and Internet 
Explorer, and terminate security software processes via a disguised Upatre trojan sent 
through spam emails that allows attackers to inject additional malware once the 
computer system has been compromised. 

Source: http://www.net-securitv.org/malware news.php?id=3 156 

8. November 19, U.S. Securities and Exchange Commission - (National) Assets frozen in 
alleged immigration scam. The U.S. Securities and Exchange Commission reported 
November 19 that the assets of a South Florida woman and her company would be 
frozen following allegations that the woman diverted $1 million to her personal 
expenses after collecting funds from investors seeking to invest $8.5 million in the EB- 
5 Immigrant Visa Program. 

Source: http://www.sec.gov/news/pressrelease/2015-263.html 
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9. November 19, Belleville News-Democrat - (Illinois) Scott Credit Union employee 
from Columbia charged with nine counts of fraud. A former manager at Scott Credit 
Union in Columbia was charged with 9 counts of fraud November 19 for conspiring to 
steal over $12 million from 2005 - 2014 by making up false loans, paying loans with 
misappropriated funds, and issuing loans and credit without authorization or required 
documentation. 

Source: http://www.bnd.com/news/local/crime/article45482790.html 

Transportation Systems Sector 

10. November 20, WCCO 4 Minneapolis - (Minnesota) Florida flight bound for Minn, 
grounded due to bomb threat. A Spirit Airlines flight from Fort Lauderdale headed to 
Minneapolis was grounded for 5 hours November 19 after a passenger made a bomb 
threat 15 minutes into the flight. Two men were escorted off the plane and authorities 
cleared the aircraft for takeoff once nothing suspicious was found. 

Source: http://minnesota.cbslocal.eom/2015/l 1/20/florida-flight-bound-for-minn- 
grounded-due-to-bomb-threat/ 

11. November 19, Mat-Su Valley Frontiersman - (Alaska) Fatal accident closes Parks 
Highway. Parks Highway in Wasilla was closed for several hours November 19 
following a 2- vehicle accident that left 1 driver dead and a second driver injured. 
Source: http://www.frontiersman.com/news/fatal-accident-closes-parks- 
highway/article 08 8ed 1 0a-8eef- 1 1 e5 - 8d43-5b2d5 e7b 1378 .html 

12. November 19, KOMO 4 Seattle - (Washington) WSP: 1 killed in Hwy. 16 pileup; 
suspected drunk driver arrested. All eastbound and some westbound lanes of 
Highway 16 near an intersection with Highway 3 in Gorst were closed for 
approximately 4 hours November 19 following a fatal accident involving 4 vehicles 
that left 1 person dead and another person injured. 

Source: http://www.komonews.com/news/local/l-killed-in-horrific-multi-vehicle- 
crash-on-Highway-16-351771951.html 

13. November 19, KOBI 5 Medford/KOTl 2 Klamath Falls - (Oregon) Propane truck 
crashes into power poles, tree on US 199. Highway 199 in Josephine County was 
closed for 2 hours November 19 while crews cleared the scene after a semi-truck drove 
through 3 power poles before crashing into a tree. Electricity was turned off while 
crews worked to clear the lines from the roadway. 

Source: https://kobi5.com/news/local-news/redwood-highway-us-199-closed-after- 
propane-truck-crashed-into-power-pole-4880/ 

Food and Agriculture Sector 

14. November 19, U.S. Food and Drug Administration - (National) Fit Firm and 
Fabulous issues voluntary nationwide recall of Ultimate Herbal Slimcaps due to 
the presence undeclared sibutramine. Fit Firm and Fabulous voluntarily recalled 2 
lots of its 30-count bottles of Ultimate Herbal Slimcap capsules November 19 after a 
U.S. Food and Drug Administration analysis found that the product contained 
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undeclared sibutramine. Products were distributed nationwide through Internet sales. 
Source: http://www.fda.gov/Safety/Recalls/ucm473638.htm 



15. November 19, U.S. Department of Agriculture - (National) Nation Pizza recalls 
Mama Cozzi’s Pizza Kitchen products due to misbranding and undeclared 
allergens. Schaumburg, Illinois-based Nation Pizza issued November 19 a nationwide 
recall of 59,028 pounds of frozen 27.5-ounce cartons of Mama Cozzi’s Pizza Kitchen 
products after in-plant review revealed that the product contained undeclared soy 
allergens. Products were distributed exclusively to ALDI grocery stores in 4 States. 
Source: http://www.fsis.usda.gov/wps/portal/fsis/topics/recalls-and-public-health- 
alerts/recall-case-archive/archive/201 5/recall- 142-201 5-release 



16. November 19, U.S. Centers for Disease Control and Prevention - (International) 

Multistate outbreak of Salmonella Poona infections linked to imported 
cucumbers. The U.S. Centers for Disease Control and Prevention reported November 
19 that 71 more cases of Salmonella Poona infections connected to imported 
cucumbers from Mexico have been reported in 23 States since the agency’s last report 
on the outbreak October 14. The agency reported that the frequency of cases has 
declined since July and August. 

Source: http ://w w w .cdc . go v/salmonella/poona-09- 1 5/index .html 

Water and Wastewater Systems Sector 

Nothing to report 

Healthcare and Public Health Sector 

17. November 20, New York Daily News - (New York) Autumn Legionnaires’ outbreak 
likely caused by Bronx Psychiatric Center’s cooling tower: Officials. The 
commissioner of the New York City Health Department announced November 20 that 
a cooling tower at the Bronx Psychiatric Center was the likely source of the city’s 
recent Legionnaires’ disease outbreak that killed 1 person and sickened 14 others. City 
officials reported that the center’s cooling towers, along with all others across the city, 
were disinfected. 

Source: http://www.nvdailynews.com/new-york/legionnaires-outbreak-linked-bronx- 
psych-center- article- 1 .244 1 463 

18. November 19, NJ.com - (Pennsylvania) Doc charged after allegedly making 
hyperbaric chamber out of propane tank parts. Officials announced November 18 
that a former doctor was charged for allegedly conspiring to defraud the U.S. Food and 
Drug Administration (FDA) and commit health care fraud when he reportedly created a 
device from pieces of used propane tanks welded together, and tried to pass it off as a 
hyperbaric chamber marketed as Hyperbox 101. Authorities also allege that the former 
doctor received millions of dollars through fraudulent claims submitted to Medicare 
and other programs between 2007 and 2011. 

Source: 

http://www.ni.com/news/index.ssf/2015/ll/doc used device made of old propane ta 
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nks to defra.html 



Government Facilities Sector 

19. November 19, Boston Globe - (Massachusetts) Former Army reservist arrested in 
Worcester armory theft. The FBI announced November 19 that a former U.S. Army 
reservist was arrested for breaking into the Lincoln W. Stoddard Army Reserve Center 
in Worcester November 14 and stealing 16 military-grade weapons. Authorities were 
able to track the suspect due to a GPS monitoring device he was wearing while facing 
other unrelated charges. 

Source: https://www.bostonglobe.com/metro/2015/ll/19/arrest-made-worcester- 
armory-brcak/SoaQ610hnDmPXDLmmFSkl I/story.html 

20. November 19, Lake Placid News - (New York) NCCC classes canceled due to 
Malone power outage. Afternoon and evening classes at three North Country 
Community College campuses in Saranac Lake were cancelled November 19 following 
a power outage at the college’s Malone campus. 

Source: http://www.lakeplacidnews.com/page/content.detail/id/524348/NCCC-classes- 
canceled-due-to-Malone-power-outage.html 

21. November 19, Champaign-Urbana News-Gazette - (Illinois) No bomb found at 
Parkland. Parkland College in Champaign County was evacuated and classes were 
cancelled November 19 due to a bomb threat against the school that was posted on 
social media. Police searched the campus and cleared the scene after nothing suspicious 
was found. 

Source: http://www.news-gazette.com/news/local/2015-ll-19/update-no-bomb-found- 
parkland.html 

For additional stories, see items 3 and_8 

Emergency Services Sector 

22. November 19, Omaha World-Herald - (Nebraska) 5 inmates charged for roles in 
deadly riot at Tecumseh State Prison. Authorities charged 5 inmates November 19 
for their involvement in a riot at the Tecumseh State Prison in Nebraska that included 
as many as 400 inmates who set fire and trashed two housing units causing over $1 
million in damage. Two employees and four inmates were injured during the incident. 
Source: http://www.omaha.com/news/crime/inmates-charged-for-roles-in-deadly-riot- 
at-tecumseh-state/article 47ce7cf0-4579-58d0-9a7d-57e04d08aeb4.html 



Information Technology Sector 

23. November 20, Softpedia - (International) Backdoor within backdoor puts over 
600,000 Arris cable modems in danger. A Brazilian security researcher discovered 
that over 600,000 Arris’ old cable modems, TG862A, TG862G, DG860A, were 
manufactured with 2 backdoor codes installed in its hardware that can be activated via 
the libarris_password.so library, and if exploited, enables attackers to access the 
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modem and enable Secure Shell (SSH) or Telnet ports, to access a BusyBox shell. 
Source: http://news.softpedia.com/news/backdoor-within-backdoor-puts-over-600-000- 
arris-cable-modems-in-danger-496485.shtml 

24. November 20, Securityweek - (International) Linkedln patches persistent XSS flaw 
in help center. Linkedln patched a cross-site scripting (XSS) vulnerability, discovered 
by an independent security researcher, in its official Help Center Web site that allowed 
attackers to inject malicious code and enable the XSS vulnerability to perform actions 
on the victims’ behalf and inject an XSS worm designed to spread on Linkedln’ s 
forums. 

Source: http://www.securitvweek.com/linkedin-patches-persistent-xss-flaw-help-center 

25. November 19, Securityweek - (International) VMware updates products due to flaw 
in Apache Flex BlazeDS. VMware released updates for several of its products 
including Flex BlazeDS 4.7.1 , which addresses Extensible Markup Language (XML) 
External Entity (XXE) vulnerability in Apache Flex BlazeDS that can be exploited by a 
remote attacker to cause a server to disclose information via a special crafted XML. 
Source: http://www.securitvweek.com/vmware-updates-products-due-flaw-apache- 
flex-blazeds 



Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 



Communications Sector 

Nothing to report 

Commercial Facilities Sector 

26. November 20, KTVQ 2 Billings - (Wyoming) Chemical odor prompts evacuation of 
Cody Recreation Center. The Cody Recreation Center in Wyoming was evacuated 
and closed until further notice November 19 due to a chemical odor that caused 
difficulty in breathing for people inside the building. The cause of the incident remains 
under investigation. 

Source: http://www.ktvq.com/story/30565823/chemical-odor-prompts-evacuation-of- 
cody-recreation-center 

27. November 19, Fort Collins Coloradoan - (Colorado) Fire causes $450,000 in 
damages to building, vehicles. A Larimer County building housing Kehn Construction 
sustained extensive damage November 18 after a fire caused an estimated $450,000 in 
damages. An investigation is ongoing to determine the cause of the fire. 

Source: http://www.coloradoan.com/story/news/2015/ll/19/fire-damages-larimer- 
county-building/760535 16/ 
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28. November 19, U.S. Department of Labor - (Texas) Three commercial real estate 
renovators willfully expose workers to asbestos in San Antonio; fines total 
$ 112 , 000 . The Occupational Safety and Health Administration cited three Austin-based 
commercial real estate employers including FBZ Broadway LP, One Eighty 
Construction Inc., and Roscoe Properties Inc., for exposing workers to asbestos at an 
apartment construction worksite in San Antonio following a May 29 inspection that 
revealed several safety hazards. Proposed fines total $1 12,000. 

Source: 

https://www.osha.gov/pls/oshaweb/owadisp.show document?p table=NEWS RELEA 
SES&p id=29058 

For another story, see item 2 

Dams Sector 



29. November 17, Wichita Eagle - (Kansas) Sediment dredging to begin on federal 
reservoir near Wolf Creek plant. The Kansas Water Office announced November 17 
that it allocated $20 million to removing 3 million cubic yards of sediment from the 
bottom of the John Redmond Reservoir in a project scheduled to be completed by the 
end of 2016. The sediment has washed into the lake during the past 50 years and has 
filled in more than 40 percent of the lake. 

Source: http://www.kansas.com/sports/outdoors/article45166872.html 



- 8 - 




NTAS 



NO ACTIVE ALERTS 
wwvv.DHS.gov/alerts 



Department of Homeland Security (DHS) 

DHS Daily Open Source Infrastructure Report Contact Information 

About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday 
through Friday] summary of open-source published information concerning significant critical 
infrastructure issues. The DHS Daily Open Source Infrastructure Report is archived for 10 days on 
the Department of Homeland Security Web site: http://www.dhs.gov/lPDailvReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support@govdelivery.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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